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Claims 1-2 (Cancelled.) 

3. (Currently Amended) A method for a clearinghouse or routing policy server to securely 
enroll a client device for an Internet telephony or multi m e dia communication system, 
comprising the steps: 

receiving a first message via HTTP from a client Internet telephony device that comprises 
an automated request to obtain an identity of one of an Internet telephony clearinghouse and 
Internet telephony routing policy server, the request further comprising a n automated computer 
programming variable operation that is set equal to alphanumeric text comprising 'getcacert' and 
that initiates a search for a certificate authority certificate; 

responding to the request by transmitting a second message comprising the certificate 
authority certificate of one of an Internet telephony clearinghouse and Internet telephony routing 
policy server in a Base64 format and encoded in ASCII with content type set to text/html; 

receiving a third message comprising a certificate request from the client Internet 
telephony device; 

responding to the client Internet telephony device request by signing the certificate; and 
transmitting a fourth message comprising the certificate signed by a certificate authority 
of one of the Internet telephony clearinghouse and the Internet telephony routing policy server. 

4. (Previously Presented) The method of Claim 3, wherein the second message comprises a 
programming variable status that is set equal to alphanumeric text comprising 'O&certificate'. 

5. (Currently Amended) The method of Claim 3, wherein the third message further comprises a 
computer programming variable operation that is set equal to at least one of a nonce value, a 
user's name, a user's password, an Internet telephony device identifier, a customer identifier, and 
a certificate request to be signed. 

6. (Previously Presented) The method of Claim 3, wherein the fourth message further comprises 
a computer programming variable entitled status that is set equal to alphanumeric text 
comprising 'O&certificate*. 



-2- 

PAGE 11/17 1 RCVD AT 10124/2005 5:38:45 PM [Eastern Daylight TimeJ * SVR:USPTO-EFXRF-6/27 * DN1S:2738300 * CSID:404 572 5145 * DURATION (mm-ss):09-14 



* OCT* 24 2005 17:39 FR KING SPALDING LLP404 572 5 145 TO 5551806949810501 P. 12 

Application Serial No. 09/747,365 

7. (Currently Amended) A method for an Internet telephony clearinghouse or Internet telephony 
routing policy server to securely enroll a client Internet telephony device for an Internet 
telephony or multi modia communication system, comprising the steps; 

receiving a first message from a client Internet telephony device that comprises an 
automated request to obtain an identity of one of a n Internet telephony clearinghouse and 
Internet telephony routing policy server, 

responding to the automated request by transmitting a second message comprising a 
certificate authority certificate of one of an Internet telephony clearinghouse and Internet 
telephony routing policy server to the client Internet telephony device; 

receiving a third message comprising a certificate request from the client Internet 
telephony device, the certificate request comprising a nonce value, a user's name, a user's 
password, a Internet telephony device identifier, a customer identifier, and a certificate request to 
be signed; 

responding to the client Internet telephony device request by signing the certificate; and 
transmitting a fourth message comprising the certificate signed by the certificate 

authority of one of the Internet telephony clearinghouse and Internet telephony routing policy 

server. 

8. (Previously Presented) The method of Claim 7, wherein the first message further comprises a 
computer programming variable entitled operation that is set equal to alphanumeric text 
comprising 'getcacert' that initiates a search for a certificate authority certificate. 

9. (Previously Presented) The method of Claim 7, wherein the first message further comprises a 
POST message received via HTTP. 

10. (Previously Presented) The method of Claim 7, wherein the second message further 
comprises certificate authority certificate in a Base64 format and encoded in ASCII with content 
type set to text/html. 
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11. (Previously Presented) The method of Claim 7, wherein the second message further 
comprises a programming variable status that is set equal to alphanumeric text comprising 
'O&certificate'- 

12. (Previously Presented) The method of Claim 7, wherein the fourth message further 
comprises a computer programming variable entitled status that is set equal to alphanumeric text 
comprising 'O&certificate'. 

13. (Currently Amended) A method for a Internet telephony clearinghouse or Internet 
telephony routing policy server to securely enroll a client Internet telephony device for an 
Internet telephony or multi m e dia communication system, comprising the steps: 

receiving a first message from a client Internet telephony device that comprises an 
automated request to obtain an identity one of an Internet telephony clearinghouse and Internet 
telephony routing policy server; 

responding to the request by transmitting a second message comprising a certificate 
authority certificate of one of an Internet telephony clearinghouse and an Internet telephony 
routing policy server to the client Internet telephony device, wherein the second message 
comprises a programming variable status that is set equal to alphanumeric text comprising 
'O&certificate' that indicates certificate authority information follows the alphanumeric text; 

receiving a third message comprising a certificate request from the client Internet 
telephony device comprising a certificate request to be signed; 

responding to the client Internet telephony device request by signing the certificate; and 

transmitting a fourth message comprising the certificate signed by the certificate 
authority of one of the Internet telephony clearinghouse and Internet telephony routing policy 
server. 

) 4, (Currently Amended) The method of Claim 13, wherein the first message further comprises 
an automated computer programming variable operation that is set equal to alphanumeric text 
comprising getcacert that initiates a search for a certificate authority certificate. 
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15. (Previously Presented) The method of Claim 13, wherein the first message further 
comprises a POST message received via HTTP. 

16. (Previously Presented) The method of Claim 13, wherein the second message further 
comprises the certificate authority certificate in a Base64 format and encoded in ASCII with 
content type set to text/html. 

17. (Currently Amended) The method of Claim 13, wherein the third message further comprises 
a computer programming variable operation that is set equal to at least one of a nonce value, a 
user's name, a user's password, an Internet telephony device identifier, a customer identifier, and 
a certificate request to be signed. 

18. (Previously Presented) The method of Claim 13, wherein the fourth message further 
comprises a computer programming variable status that is set equal to alphanumeric text 
comprising '0&certificate\ 
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